about summary refs log tree commit diff
path: root/modules/user
diff options
context:
space:
mode:
authoraszlig <aszlig@nix.build>2020-09-11 20:06:43 +0200
committeraszlig <aszlig@nix.build>2020-09-11 20:09:17 +0200
commit214968cbe4ec9b2705c0d3e402dca043c0847cc8 (patch)
treee59f711136e7ef8d76905019e7785db09b95bc65 /modules/user
parent877fb29635370f3ebbdfd0211460bc66347269ea (diff)
sandbox: Only mount new procfs instance for PID ns
If we don't have a PID namespace, we're not allowed to mount a new
procfs instance and subsequently get an error (EPERM).

To cope with this, we're now bind-mounting /proc just like the other
pseudo file systems IFF we're not using the CLONE_NEWPID flag.

Signed-off-by: aszlig <aszlig@nix.build>
Diffstat (limited to 'modules/user')
0 files changed, 0 insertions, 0 deletions